🇨🇦
Anytech
2026-06-18 05:38:32
(3 days ago)
Blocked by Conn-Monitor: Web scanning activity
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 00:56:30
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2a0a:c802:0:3::11 (no-rdns.mivocloud.com): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0a:c802:0:3::11 (no-rdns.mivocloud.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 20:56:22.346957 2026] [security2:error] [pid 28177:tid 28177] [client 2a0a:c802:0:3::11:42876] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.old" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "susanoneill.us"] [uri "/wp-config.old"] [unique_id "ajNCNh7G2quTbmooobBH5AAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 22:38:36
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 2a0a:c802:0:3::11 (no-rdns.mivocloud.com): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0a:c802:0:3::11 (no-rdns.mivocloud.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 18:38:31.275487 2026] [security2:error] [pid 12371:tid 12371] [client 2a0a:c802:0:3::11:50038] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||starcrestsales.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "starcrestsales.com"] [uri "/wp-content/debug.log"] [unique_id "ajMh55KpNf1h6HDUFiAPGQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 21:31:15
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 2a0a:c802:0:3::11 (no-rdns.mivocloud.com): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0a:c802:0:3::11 (no-rdns.mivocloud.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 17:31:11.762853 2026] [security2:error] [pid 12121:tid 12121] [client 2a0a:c802:0:3::11:46582] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||spacebooger.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "spacebooger.com"] [uri "/wp-content/debug.log"] [unique_id "ajMSH4tUFC_vuGE9xnllkQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
filstal.org
2026-06-17 15:45:06
(4 days ago)
Web exploit or injection attempt blocked by ModSecurity WAF.
SQL Injection
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 13:51:45
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 2a0a:c802:0:3::11 (no-rdns.mivocloud.com): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0a:c802:0:3::11 (no-rdns.mivocloud.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 09:51:41.873258 2026] [security2:error] [pid 2907:tid 2907] [client 2a0a:c802:0:3::11:55228] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||cosplayculture.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cosplayculture.com"] [uri "/wp-content/debug.log"] [unique_id "ajKmbXV9mZLBHWZiq3PoIAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 11:27:59
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 2a0a:c802:0:3::11 (no-rdns.mivocloud.com): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0a:c802:0:3::11 (no-rdns.mivocloud.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 07:27:49.755025 2026] [security2:error] [pid 13690:tid 13690] [client 2a0a:c802:0:3::11:35506] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||clayrivers.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "clayrivers.com"] [uri "/wp-content/debug.log"] [unique_id "ajKEtYSGS_gw6JPoV-njoQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 09:30:46
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 2a0a:c802:0:3::11 (no-rdns.mivocloud.com): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0a:c802:0:3::11 (no-rdns.mivocloud.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 05:30:41.761550 2026] [security2:error] [pid 19733:tid 19733] [client 2a0a:c802:0:3::11:49906] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||writebetweenthelines.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "writebetweenthelines.com"] [uri "/wp-content/debug.log"] [unique_id "ajJpQX0kqHVaVVxs85rqdwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 08:23:12
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 2a0a:c802:0:3::11 (no-rdns.mivocloud.com): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0a:c802:0:3::11 (no-rdns.mivocloud.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 04:23:09.809901 2026] [security2:error] [pid 3664:tid 3664] [client 2a0a:c802:0:3::11:38698] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||williamfitzsimmons.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "williamfitzsimmons.com"] [uri "/wp-content/debug.log"] [unique_id "ajJZbV7khuuHi5sW2GKQtgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 06:50:58
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 2a0a:c802:0:3::11 (no-rdns.mivocloud.com): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0a:c802:0:3::11 (no-rdns.mivocloud.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 02:50:52.469122 2026] [security2:error] [pid 32690:tid 32690] [client 2a0a:c802:0:3::11:52236] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||waterspell.net|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "waterspell.net"] [uri "/wp-content/debug.log"] [unique_id "ajJDzDksr3cXQPZvHNjU_wAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 06:19:50
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 2a0a:c802:0:3::11 (no-rdns.mivocloud.com): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0a:c802:0:3::11 (no-rdns.mivocloud.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 02:19:44.770273 2026] [security2:error] [pid 24392:tid 24392] [client 2a0a:c802:0:3::11:39490] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vzan.org|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vzan.org"] [uri "/wp-content/debug.log"] [unique_id "ajI8gCqjQiyDqeafmjzFewAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 04:07:21
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 2a0a:c802:0:3::11 (no-rdns.mivocloud.com): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0a:c802:0:3::11 (no-rdns.mivocloud.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 00:07:18.832342 2026] [security2:error] [pid 27972:tid 27972] [client 2a0a:c802:0:3::11:43244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ussthresher.com"] [uri "/wp-config.php.bak"] [unique_id "ajIddg7EwQkXNHF2suqUAgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 03:28:21
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 2a0a:c802:0:3::11 (no-rdns.mivocloud.com): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0a:c802:0:3::11 (no-rdns.mivocloud.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 23:28:12.366015 2026] [security2:error] [pid 8730:tid 8730] [client 2a0a:c802:0:3::11:42370] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||unionega.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "unionega.com"] [uri "/wp-content/debug.log"] [unique_id "ajIUTOnFsG0meJz-CJpF-QAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 00:54:42
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 2a0a:c802:0:3::11 (no-rdns.mivocloud.com): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0a:c802:0:3::11 (no-rdns.mivocloud.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 20:54:32.895894 2026] [security2:error] [pid 21772:tid 21789] [client 2a0a:c802:0:3::11:55494] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||tomithai.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "tomithai.com"] [uri "/wp-content/debug.log"] [unique_id "ajHwSGU33WhNRPLQCu0AOQAAAQ8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 23:54:00
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 2a0a:c802:0:3::11 (no-rdns.mivocloud.com): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0a:c802:0:3::11 (no-rdns.mivocloud.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 19:53:51.125540 2026] [security2:error] [pid 20190:tid 20190] [client 2a0a:c802:0:3::11:59698] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||thingstodonude.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "thingstodonude.com"] [uri "/wp-content/debug.log"] [unique_id "ajHiD-anEmrX9cuLSLJF7QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack